Paul Welch pwelch

Filter Phish

This Google Apps Scripts filter will automatically move all future emails with the header X-PHISHTEST to trash.

If there's no errors it should be blank, OR a verbose message that it removed a phishing email.

This is a compiled list of falsehoods programmers tend to believe about working with time.

Don't re-invent a date time library yourself. If you think you understand everything about time, you're probably doing it wrong.

There are always 24 hours in a day.
February is always 28 days long.
Any 24-hour period will always begin and end in the same day (or week, or month).

Virus Name: WannaCrypt, WannaCry, WanaCrypt0r, WCrypt, WCRY
Vector: All Windows versions before Windows 10 are vulnerable if not patched for MS-17-010. It uses EternalBlue MS17-010 to propagate.
Ransom: between $300 to $600. There is code to 'rm' (delete) files in the virus. Seems to reset if the virus crashes.
Backdooring: The worm loops through every RDP session on a system to run the ransomware as that user. It also installs the DOUBLEPULSAR backdoor. It corrupts shadow volumes to make recovery harder. (source: malwarebytes)
Kill switch: If the website www.iuqerfsodp9ifjaposdfjhgosurijfaewrwergwea.com is up the virus exits instead of infecting the host. (source: malwarebytes). This domain has been sinkholed, stopping the spread of the worm. Will not work if proxied (source).

update: A minor variant of the viru

create an empty project and add a Gemfile

cd ~/Desktop
mkdir project-name
cd project-name
touch Gemfile

	#!/usr/bin/env bash

	set -Eeuo pipefail
	trap cleanup SIGINT SIGTERM ERR EXIT

	script_dir=$(cd "$(dirname "${BASH_SOURCE[0]}")" &>/dev/null && pwd -P)

	usage() {
	cat <<EOF
	Usage: $(basename "${BASH_SOURCE[0]}") [-h] [-v] [-f] -p param_value arg1 [arg2...]

	from __future__ import print_function
	import pickle
	import os.path
	from googleapiclient.discovery import build
	from google_auth_oauthlib.flow import InstalledAppFlow
	from google.auth.transport.requests import Request

	# If modifying these scopes, delete the file token.pickle.
	SCOPES = ['https://www.googleapis.com/auth/drive',
	'https://www.googleapis.com/auth/drive.file',

	# Stick this in your home directory and point your Global Git config at it by running:
	#
	# $ git config --global core.attributesfile ~/.gitattributes
	#
	# See https://tekin.co.uk/2020/10/better-git-diff-output-for-ruby-python-elixir-and-more for more details

	*.c diff=cpp
	*.h diff=cpp
	*.c++ diff=cpp
	*.h++ diff=cpp

	NOTE: For items with no links just Google the text and you should be good.

	- Pick one learning track (helps reduce TMI)
	• No programming experience: greatercommons.com/learn/golang
	• Programming experience: https://quii.gitbook.io/learn-go-with-tests/ or Ultimate Go
	- Use these as reading materials:
	• Go By Examples
	• The Go Programming Book
	- Find a local Go meetup and make a friend. This is key to getting unstuck.
	- Need something to build outside of the training course: https://exercism.io/tracks/go

	owncloud:
	image: owncloud
	links:
	- mariadb:mysql
	- redis:redis
	ports:
	- 8081:80
	volumes:
	- /opt/docker-persist/owncloud/apps:/var/www/html/apps
	- /opt/docker-persist/owncloud/config:/var/www/html/config

	begin
	require "bundler/inline"
	rescue LoadError => e
	$stderr.puts "Bundler version 1.10 or later is required. Please update your Bundler"
	raise e
	end

	gemfile(true) do
	source "https://rubygems.org"